Pro-Server EX Multiple Vulnerabilities

Bugtraq ID:	53499
Class:	Unknown
CVE:	CVE-2012-3792 CVE-2012-3793 CVE-2012-3794 CVE-2012-3795 CVE-2012-3796 CVE-2012-3797
Remote:	Yes
Local:	No
Published:	May 13 2012 12:00AM
Updated:	Jun 27 2012 10:30PM
Credit:	Luigi Auriemma
Vulnerable:	Pro-face Pro-Server EX 1.30 Pro-face PCRuntime 3.1
Not Vulnerable:

Pro-Server EX Multiple Vulnerabilities

Pro-Server EX is prone to multiple vulnerabilities.

A successful attack will allow attacker-supplied code to run in the context of the application, will disclose sensitive information, or will cause a denial-of-service condition.

Pro-Server EX Multiple Vulnerabilities

The researcher has created a proof-of-concept to demonstrate these issues. Please see the references for more information.

Pro-Server EX Multiple Vulnerabilities

Solution:
Updates are available. Please see the reference for more details.

Pro-Server EX Multiple Vulnerabilities

References:

• Pro-face Pro-Server EX Vulnerabilities (Luigi Auriemma)
  
• Pro-Server EX Homepage (Pro-face)
  
• ICS-ALERT-12-137-01�??PRO-FACE PRO-SERVER EX MULTIPLE VULNERABILITIES (ICS-CERT)
  
• ICSA-12-179-01�??PRO-FACE PRO-SERVER EX MULTIPLE VULNERABILITIES (ICS-CERT)